Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87991f72-7aa6-3b3a-acc3-cd9a6c50d33f.roa
File:                     87991f72-7aa6-3b3a-acc3-cd9a6c50d33f.roa (raw, json)
Hash identifier:          Bv30czam6ZE4OFoBPLrP8DSGATNOUbhX5vnkkV9SnBg=
Subject key identifier:   1F:6E:1A:04:55:88:04:96:33:66:62:7E:1D:38:E5:84:19:6E:F5:CE
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584BAEC7C26BD6899835AE81AD00
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87991f72-7aa6-3b3a-acc3-cd9a6c50d33f.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     205220
IP address blocks:        166.0.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:c2:6b:d6:89:98:35:ae:81:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=5684b322-bbc8-425d-b29d-62ebf73b51ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:12:32:d4:4a:ab:ec:23:8c:a7:83:50:39:
                    6e:26:f3:78:ef:50:e2:14:69:5a:58:f3:13:68:fc:
                    54:f7:a6:12:69:48:37:49:ee:6c:01:f7:6d:30:38:
                    8d:14:74:3d:6d:3b:03:2a:32:2c:66:e0:14:cd:75:
                    55:44:ad:ae:09:a7:39:05:e1:0c:07:b5:06:98:97:
                    51:e7:4d:e4:cc:0b:79:bf:21:bc:f7:9a:0e:74:5c:
                    68:87:1f:a4:6e:9c:8b:6f:8b:e7:bf:e3:35:3c:e0:
                    76:cf:67:67:d1:ff:6a:d4:1f:e8:30:5f:52:a5:a7:
                    0b:0a:52:92:17:51:50:70:98:1f:56:4f:e9:86:c9:
                    91:85:4f:fe:57:43:44:f4:88:2d:4c:08:4e:48:0a:
                    da:37:74:c6:5c:ef:be:1c:56:d1:da:1c:c4:7e:8a:
                    9c:32:b1:79:30:12:3a:24:d4:2a:ce:c3:35:39:bb:
                    61:1d:6c:b1:3d:89:55:cc:b8:26:55:cb:89:08:57:
                    85:9d:fc:5d:b3:54:e9:3a:70:a5:12:e7:37:98:73:
                    a8:07:3c:81:6a:62:2f:3a:96:8b:f3:a3:83:06:22:
                    df:07:8e:f0:ba:44:f8:76:1a:20:e1:91:1a:ef:83:
                    c1:96:3d:5a:a7:5d:f1:a2:e1:29:81:1e:2a:d3:28:
                    08:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6E:1A:04:55:88:04:96:33:66:62:7E:1D:38:E5:84:19:6E:F5:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/87991f72-7aa6-3b3a-acc3-cd9a6c50d33f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.0.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:80:da:b9:a3:b0:98:16:1a:a5:f2:aa:f7:ce:7e:fc:57:79:
         08:b9:12:fd:5a:7b:f9:86:9b:40:83:04:23:bc:8c:11:d4:d6:
         92:5f:8b:4f:11:54:b1:dc:e7:35:bc:e3:be:36:a4:0d:7c:6f:
         1b:4a:6b:f8:22:63:13:dc:83:b9:4b:35:e2:03:99:d0:1f:24:
         3f:e2:d8:89:fa:70:c6:93:fc:6b:f1:df:33:47:d1:53:77:d6:
         ff:c0:90:33:fe:4c:d3:a7:04:2d:3b:b0:ce:00:6c:91:b0:0c:
         5c:cd:0f:47:9e:92:ed:f8:4c:91:f1:1f:34:d9:b9:f9:8e:08:
         66:0e:d8:18:0e:33:bd:51:24:0e:96:c1:54:2d:98:ba:c6:e7:
         2f:17:33:95:e2:45:ed:ce:b4:43:61:50:f7:bc:4b:52:4b:d3:
         97:a9:35:ed:ec:df:eb:5f:02:19:28:68:24:47:d0:17:79:ff:
         f8:c5:19:02:87:6f:73:c1:09:ab:d5:7b:a8:1c:98:77:f6:c3:
         85:e3:56:3e:91:7d:89:e3:94:05:02:e6:94:f6:9c:ac:3a:75:
         ac:83:3e:f2:e3:06:73:3f:d2:70:ee:03:aa:5e:69:d1:2c:8b:
         ff:3d:74:b7:57:75:78:d3:95:51:8c:f9:c7:0b:ac:ad:7e:6f:
         e1:e0:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:31 2025 by rpki-client